Threats tagged 'ghsa-6cg8-27q5-77wx'

LibRaw version 0.22.0 has a numeric conversion vulnerability in the parse_tiff_ifd() function when handling TIFF tag 0x00fe (NewSubfileType). An attacker can craft a RAW, TIFF, or DNG file with a NewSubfileType value outside the signed int range, causing an out-of-range conversion without proper validation. This triggers undefined behavior that leads to process termination and denial of service.